Chapter 2 Setting Up XSCF 2-115
To enable the https, an XSCF reset is required. Please reset the XSCF using by
rebootxscf(8) command. After the XSCF reset, the XSCF session is disconnected.
Please log in again to the XSCF. The https settings are automatically applied to the
standby XSCF Unit for a system with a redundant XSCF configuration.
When the expiration date of the web server certificate has passed, or you change the
web server certificate, configure the https settings again.
External
authentication
When the external CA and CA in Intranet are
used, set the following.
• Create a web server private key of XSCF
• Make the Certificate Signing Request (CSR)
by XSCF and Request the issue of the
certificate to CA.
• Import a web server certificate to XSCF.
sethttps Specify the following
Distinguished Name for
making a CSR.
•Country (2 letter: Ex.US,
JP), Province, Locality,
Organization,
Organizational unit,
Common name (Your name
or web server host name),
email address of
administrator
• Each value, except for
Country, must consist of up
to 64 characters.
For details of DN, see the
sethttps(8) man page, or
the XSCF Reference Manual.
Self
authentication
Automatically, the self CA is constructed in
XSCF and the certificate is installed.
The following are set.
• A self CA is constructed
• A private key is made
• A web server certificate self-signed is made
sethttps Specify the same DN as the
External authentication at
making a web server
certificate.
Display the
certificate
Displays the following:
•CSR
• Web server certificate
showhttps The certificate expiration of
the self-CA is as follows:
• Server certificate: 10 year
The set value becomes
effective, when the certificate
will be created next time.
TABLE 2-15 https Administration (Continued)
Item Description Shell Command Remarks
To Next Page
Loading...
Need help?
General